Product by WPVibes

    Addon Elements For Elementor (formerly Elementor Addon Elements)

    21 known vulnerabilities in Addon Elements For Elementor (formerly Elementor Addon Elements) (WPVibes), 0 of them actively exploited (CISA KEV).

    Key figures

    21

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Addon Elements For Elementor (formerly Elementor Addon Elements) (WPVibes)
    HighCVE-2024-1358

    Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusion

    also in 1 other product

    		8.8
    MediumCVE-2023-4723

    Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure

    also in 1 other product

    		5.3
    MediumCVE-2024-3743

    Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-1392

    Addon Elements for Elementor (formerly Elementor Addon Elements): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-1391

    Addon Elements for Elementor (formerly Elementor Addon Elements): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-1393

    Addon Elements for Elementor (formerly Elementor Addon Elements): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-1422

    Addon Elements for Elementor (formerly Elementor Addon Elements): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-2792

    Addon Elements for Elementor (formerly Elementor Addon Elements): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2022-4974

    Freemius SDK <= 2.4.2 - Missing Authorization Checks

    also in 154 other products

    		6.3
    MediumCVE-2024-7122

    Addon Elements for Elementor (formerly Elementor Addon Elements): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-2091

    Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    also in 1 other product

    		5.4
    MediumCVE-2025-12537

    Addon Elements for Elementor <= 1.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    		6.4
    MediumCVE-2024-13215

    Addon Elements for Elementor (formerly Elementor Addon Elements): Exposure of Private Personal Information to an Unauthorized Actor

    also in 1 other product

    		4.3
    MediumCVE-2024-4569

    Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-4401

    Addon Elements for Elementor (formerly Elementor Addon Elements): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-4570

    Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-5381

    Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting

    also in 1 other product

    		4.4
    MediumCVE-2024-2092

    Addon Elements for Elementor (formerly Elementor Addon Elements): Cross-site Scripting

    also in 1 other product

    		5.4
    MediumCVE-2024-8902

    Addon Elements for Elementor (formerly Elementor Addon Elements): Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		4.3
    MediumCVE-2023-4690

    Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery

    also in 1 other product

    		5.4
    MediumCVE-2023-4689

    Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery

    also in 1 other product

    		5.4

    All products by WPVibes